Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/QhkomV9_6ceJGU8VKTfbtyRNcXM.roa
File: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (raw, json)
Hash identifier: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=
Subject key identifier: 42:19:28:99:5F:7F:E9:C7:89:19:4F:15:29:37:DB:B7:24:4D:71:73
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 01951AACBB76025EF530D3E97123055925CE
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/QhkomV9_6ceJGU8VKTfbtyRNcXM.roa
Signing time: Tue 18 Feb 2025 20:08:02 +0000
ROA not before: Tue 18 Feb 2025 20:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 212.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:ac:bb:76:02:5e:f5:30:d3:e9:71:23:05:59:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Feb 18 20:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421928995f7fe9c789194f152937dbb7244d7173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:46:53:cb:70:23:66:88:13:2d:fb:26:ab:
94:c0:f0:3a:e2:82:8b:7b:ad:8d:9c:47:a0:2f:10:
87:07:7d:34:4b:f1:f2:81:5c:81:f0:99:1f:96:3f:
3d:c5:0e:44:b1:7c:86:96:39:29:8c:86:61:14:9b:
e0:99:cc:20:ec:d3:aa:c3:0c:21:21:b3:43:65:b1:
95:a4:55:c9:ad:4e:80:14:28:5d:b5:b0:99:2d:ed:
9e:bc:fc:cb:80:7c:23:08:9a:89:3f:4c:6e:4f:5f:
c4:46:10:6d:2b:e7:39:df:56:4a:a0:1f:cf:3e:5f:
18:e9:2b:3d:16:18:b2:a1:83:35:e0:4b:e1:85:83:
a5:a7:f6:5c:b3:9a:90:c2:57:96:d3:0c:a8:a6:40:
35:8d:40:44:3b:b2:d2:5d:ce:ac:fa:61:4b:1e:cd:
a7:4b:d9:49:57:67:5b:9f:f7:f6:3c:e0:9c:62:0c:
e4:b3:ba:d3:7d:d5:c3:3d:fd:9e:bd:57:19:84:30:
49:74:be:a2:28:f0:30:f6:3b:61:c5:0f:10:80:58:
90:b9:d7:ec:25:46:52:5f:53:5d:76:ee:e4:1c:27:
9b:22:73:ef:2a:4f:d3:26:ac:50:c5:3a:fb:10:c7:
be:b9:5f:55:c6:01:7a:15:f2:be:26:29:69:54:7c:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:28:99:5F:7F:E9:C7:89:19:4F:15:29:37:DB:B7:24:4D:71:73
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/QhkomV9_6ceJGU8VKTfbtyRNcXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:87:33:84:13:2a:9d:c4:7e:7e:16:c1:ab:be:57:50:5f:
03:ad:cf:3c:4d:6d:e9:85:b7:75:cd:4f:22:00:e0:eb:84:51:
72:6c:05:b0:b5:d4:3e:00:9b:d0:e6:ac:2b:02:6d:2d:a8:ef:
7a:78:81:77:3f:f7:eb:43:78:36:dc:92:f7:50:4a:ca:96:ca:
87:34:85:d0:c3:3a:81:4d:00:ca:6e:e6:f2:e4:4b:7b:9c:9b:
3c:c8:83:f1:4b:c8:0a:c3:f4:a7:34:56:20:5d:20:de:28:fc:
e7:93:ed:17:89:ad:d8:bd:f3:8c:30:be:cd:9c:e5:d5:c9:d9:
11:26:a6:28:fe:5c:81:9b:ef:5d:3e:fc:40:67:eb:df:b4:d4:
fd:e1:e7:04:fa:cc:2a:76:1e:38:02:f5:6e:d0:54:b6:a9:44:
e5:fe:c4:b1:45:a4:6f:26:62:2a:8e:05:d9:7f:b1:38:9a:2a:
5f:01:62:38:49:0e:bc:ee:9a:70:86:d5:e1:6d:f7:c6:15:61:
7e:4a:b0:a2:cf:97:f8:20:03:d1:e8:43:98:cf:c4:62:ed:d3:
2f:00:10:15:0c:7d:b5:43:df:6c:22:ef:90:c9:29:59:6c:1a:
c9:e7:49:c9:a4:12:26:7e:b6:4f:68:b1:33:8d:e3:97:a7:a6:
7a:10:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:22 2025 by rpki-client